NetSight
low3.1

CVE-2026-59299

Composition lookup can potentially poison base function in Spring Cloud Function.

Impact

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

Affected products

VendorProductAffected versions
VmwareSpring Cloud Function
from 3.2.0 before 3.2.17
from 4.2.0 before 4.2.8
from 4.3.0 before 4.3.5
from 5.0.0 before 5.0.4

Weakness classification

References